CVE-2010-1357

The CVE-2010-1357 entry concerns a Cross-site Scripting (XSS) vulnerability in the SBD Directory Software 4.0, specifically in editors/logindialogue.php, exploitable via PATH_INFO. The NVD description confirms the vulnerability allows remote attackers to inject arbitrary web script or HTML. The p...

CVE-2010-1357: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in editors/logindialogue.php in SBD Directory Software 4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2010-1092

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...

Sql injection

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...

CVE-2010-1092

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...

CVE-2010-1092

CVE-2010-1092 affects ScriptsFeed Business Directory Software, specifically login.php. The vulnerability is SQL injection in the login routine via the us and ps parameters, allowing remote attackers to execute arbitrary SQL. Public references indicate there are exploits available (e.g., Exploit-D...

CVE-2010-1092: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...

esyndicat-xss.txt

eSyndiCat Directory Software Pro 2.2 XSS - Cross-Site Scripting Vulnerability - Vendor : www.esyndicat.com - Platform : PHP - Discovered : by Fugitif My vulnerability is on "register.php" and works this way : http://www.site.com/register.php where...

eSyndiCat Directory Software Multiple SQL Injection Vulnerabilities

No description provided by source. eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected] ----------------------------------------------------------- Greetz tO...

eSyndiCat Directory Software Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== eSyndiCat Directory Software Multiple SQL Injection Vulnerabilities =================================================================== eSyndiCat: Multiple SQL Injection's...

eSyndiCat Directory Software - Multiple SQL Injections

eSyndiCat Directory Software - Multiple SQL Injections eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected]...

eSyndiCat Directory Software - Multiple SQL Injections

eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected] ----------------------------------------------------------- Greetz tO:- Security-Shell Members...

CVE-2002-0455

IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames...